FAA78100001: (78100001) ILook - Cybercop 202 - ILook Automated Forensic Application
| FAA78100001 | Cancelled | ||
| (78100001) ILook - Cybercop 202 - ILook Automated Forensic Application | |||
| COURSE | 2007-07-26 | ||
| This course serves as an overview of the most used features of ILook Investigator. It includes the IXImager to create a duplicate image of the hard disk and the examination of several hard drive partitions. The multiple aspects of this GUI-based forensic suite are presented with emphasis on imaging and pocessing of seized media. The student will walk through a case from previewing to the final reports and will be able to effectively conduct salvage, file signature analysis, registry analysis, hash analysis, deconstruction, keyword searches and more, on seized evidence. It does not teach basic forensices, but rather how to use the tool to perform forensic examinations. Many of the built in automated short cuts will be presented, which will assist in better case preparation and analysis. | |||
| ASH-20 | |||
| OAT | 36.0 | ||
| Prerequisites | |||
